CVE-2022-45540

Name of the Vulnerable Software and Affected Versions EyouCMS versions prior to 1.6.0

Description A reflected-XSS issue was discovered in the article type editor component. The issue occurs when the POST value name contains a malformed UTF-8 character.

Recommendations For EyouCMS versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue. As a temporary workaround, consider validating and sanitizing the name parameter in the POST request to prevent the injection of malformed UTF-8 characters.